{"id":"CVE-2026-111926","kind":"vulnerability","aliases":["CVE-2026-111926"],"related":[],"title":"Coder: unauthenticated agent debug server leaks workspace environment secrets","description":"Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this endpoint to read credentials such as cloud keys or registry tokens.","summary":"Coder agents from 2.10.0 before 2.34.8 run an unauthenticated debug HTTP server on 127.0.0.1:2113. Its /debug/manifest endpoint returns template environment variable values, which can include cloud keys or registry tokens.","severity":"medium","cvss":4.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["coder","infrastructure","secrets","self-hosted","workspaces"],"not_affected_if":["no-secrets-in-template-env","version-2.34.8-or-later"],"how_to_check":"- Run `coder version` on each workspace host or check the Coder server version and confirm it is below `2.34.8`.\n- Check whether anything listens on 127.0.0.1:2113 on workspace machines, for example with `ss -ltnp | grep 2113`.","fix":"- Upgrade Coder to `2.34.8` or later.\n- Rotate any cloud keys or registry tokens that were set as template environment variables in affected workspaces.","status":"open","published_at":"2026-10-17T19:16:35+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","triaged_at":"2026-10-25T04:33:37+00:00","updated_at":"2026-10-25T04:33:37+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-25T04:33:37Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Coder to `2.34.8` or later.\n- Rotate any cloud keys or registry tokens that were set as template environment variables in affected workspaces.","reach":"local","title":"Coder: unauthenticated agent debug server leaks workspace environment secrets","impact":"medium","summary":"Coder agents from 2.10.0 before 2.34.8 run an unauthenticated debug HTTP server on 127.0.0.1:2113. Its /debug/manifest endpoint returns template environment variable values, which can include cloud keys or registry tokens.","category":"infrastructure","nicknames":[],"who_cares":["coder","self-hosted","workspaces","secrets"],"confidence":0.7,"needs_auth":"no","worst_case":"Local users read template environment secrets such as cloud keys.","analyst_note":"","how_to_check":"- Run `coder version` on each workspace host or check the Coder server version and confirm it is below `2.34.8`.\n- Check whether anything listens on 127.0.0.1:2113 on workspace machines, for example with `ss -ltnp | grep 2113`.","needs_analyst":false,"not_affected_if":["version-2.34.8-or-later","no-secrets-in-template-env"],"who_is_affected":"Teams running Coder agents in versions from 2.10.0 up to but not including 2.34.8 are exposed. The risk applies when a template passes credentials as environment variables and another local user or process shares the workspace, since any of them can query the local endpoint. Deployments on 2.34.8 or later, or with no secrets in template environment variables, have less exposure.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.00063,"input_tokens":3358,"output_tokens":589,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111926':12A,15A '-2026':11A,14A '/debug/manifest':39B,70C '127.0.0.1':36B,67C '2.10.0':26B,56C '2.34.8':28B,58C '2113':37B,68C 'agent':3A,24B,62C,75C 'cloud':49B,105C 'coder':1A,16B,23B,54C 'credenti':102C 'cve':10A,13A 'debug':4A,32B,63C 'endpoint':40B,99C 'environ':8A,43B,81C 'full':74C 'handler':71C 'host':21B 'http':33B,64C 'includ':48B,77C 'infrastructur':17B 'key':50B,106C 'leak':6A 'lower':86C 'lower-privileg':85C 'manifest':76C 'privileg':87C 'process':91C 'provid':80C 'queri':97C 'read':101C 'registri':52B,108C 'return':41B,72C 'run':29B 'secret':9A,18B 'self':20B 'self-host':19B 'server':5A,34B,65C 'templat':42B,79C 'template-provid':78C 'token':53B,109C 'unauthent':2A,31B,61C 'unix':88C 'user':89C 'valu':45B,83C 'variabl':44B,82C 'whose':69C 'workspac':7A,22B,95C","nicknames":[],"mitigations":[],"who_affected":"Teams running Coder agents in versions from 2.10.0 up to but not including 2.34.8 are exposed. The risk applies when a template passes credentials as environment variables and another local user or process shares the workspace, since any of them can query the local endpoint. Deployments on 2.34.8 or later, or with no secrets in template environment variables, have less exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-17T19:16:35+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111926","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111926","severity":null,"published_at":"2026-10-17T19:16:35+00:00","modified_at":"2026-10-19T21:02:21+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}